You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
Do we know if it's on the roadmap to be able to assign groups to Authentication policies? We sync most of our users via SSO, but we do have some external users that would not be coming in via SSO, so we can't just set the default policy to require SSO, I need to have a separate policy. Since we're syncing groups from Entra, it would be ideal to be able to assign groups to policies, so that we're not having to babysit the user list.
I am David Olive, the product manager who leads External User Security.
If you wish to have a policy for external users I would suggest using the external user security feature - https://support.atlassian.com/security-and-access-policies/docs/what-is-external-user-security/
This lets you force external users to go through a security policy different from the ones you set up for managed accounts in authentication policies.
If you have any questions or if the feature does not meet what you need please let me know at email@example.com!
Hi @Sean Williams apologies for the link and missing your groups question.
For managed users I can surface your groups question with the authentication policies team. However there is an open ticket where customers are raising similar requests here
I would recommend putting your feedback there as well.
For external users we do not currently have groups support on the roadmap, right now we have one EUS policy that applies to all external users. Our goals for next year involve releases SSO capability for externals and potentially multiple policies for externals.
As the product manager for external user security I am happy to jump on a call with you to discuss your organizations needs further for EUS - you can schedule time with me here
Or you can reach out to me async at firstname.lastname@example.org.